CGI Interview Question

How would you conduct a security code review?